Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0C26620F6D911EEAAB0053FC4F9AE02.roa
File:                     F0C26620F6D911EEAAB0053FC4F9AE02.roa (raw, json)
Hash identifier:          HSBOQPhZpI6L8u+aDxL+fbHFW0wUdejm0cMcRkwgAWo=
Subject key identifier:   27:05:38:8B:F1:29:31:6D:75:51:42:16:07:73:F7:86:57:45:EC:54
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       42EC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0C26620F6D911EEAAB0053FC4F9AE02.roa
Signing time:             Wed 10 Apr 2024 01:30:40 +0000
ROA not before:           Wed 10 Apr 2024 01:30:40 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151917
IP address blocks:        2401:8f20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 01:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17132 (0x42ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Apr 10 01:30:40 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6615ebc0-4dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4f:e8:6e:f6:f0:5a:2b:a1:b3:97:14:ef:c4:
                    5a:c3:51:e0:9f:0b:ba:6a:aa:1f:45:fc:6b:3b:c2:
                    28:af:d3:a2:e0:13:c8:7a:60:04:d5:2e:0d:a1:1b:
                    7b:85:f4:ad:eb:43:2b:9e:74:69:87:77:2c:a6:a0:
                    44:0d:79:9f:df:a1:33:1d:81:62:14:6d:c8:76:b6:
                    2f:51:29:db:d6:84:b4:aa:18:90:c8:f5:dd:e2:43:
                    a3:d0:8d:20:57:5b:4f:21:03:3f:ea:d5:f7:f8:00:
                    ae:c3:54:08:d8:3c:f7:32:ed:6e:57:6b:bd:80:49:
                    73:cc:3e:6a:f1:e5:32:03:a7:5f:77:a9:2f:7a:32:
                    c3:30:4f:c9:2c:d1:40:4a:5e:8b:4f:e7:05:2e:dc:
                    76:2d:c6:5b:36:e2:85:09:98:d1:58:7d:18:d4:59:
                    45:cd:bf:72:bf:97:f3:9e:97:4c:62:9e:86:60:a7:
                    27:78:78:84:33:64:50:2f:2a:cf:a7:12:cc:88:1e:
                    0b:a4:41:d7:d6:2e:7b:cd:a7:ec:93:f5:bc:a2:e1:
                    04:36:d4:61:9c:29:c4:48:7c:46:75:d6:3e:14:aa:
                    c7:c3:63:a9:56:01:c0:93:7a:d0:eb:4b:75:6b:db:
                    be:84:70:cd:bc:ed:c4:7e:6a:d9:08:8f:7d:52:72:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:05:38:8B:F1:29:31:6D:75:51:42:16:07:73:F7:86:57:45:EC:54
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0C26620F6D911EEAAB0053FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8f20::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:5b:61:0c:65:5f:f9:0f:38:23:45:f3:7c:43:71:da:e5:
         92:4e:cd:a3:1c:b9:5e:d7:78:6f:8b:fd:8f:7e:9c:16:5f:2c:
         68:f0:6d:e3:f9:68:0d:1f:41:88:9e:67:1b:00:ba:db:d1:e3:
         35:f3:3f:a9:da:9b:53:a0:15:ef:81:e3:e8:7a:74:d7:5e:30:
         62:0a:df:54:62:1a:2a:49:68:07:f2:d0:c3:27:5d:56:23:6e:
         64:0e:32:99:e2:c0:ee:eb:01:89:a7:c6:d3:d4:6f:5d:53:4d:
         73:44:d8:fe:f7:76:fa:22:4f:4b:4b:6a:8a:ca:6c:d5:87:d1:
         ad:59:86:9c:b8:a0:93:93:05:fa:32:9b:45:a9:2e:27:f1:ed:
         ca:98:17:7e:23:93:8a:85:07:51:b7:4c:aa:4d:2a:7c:dc:1a:
         31:74:c0:35:44:ae:da:f1:2c:86:d0:b4:91:36:71:74:5b:3b:
         78:54:95:23:b2:fe:a2:c3:1c:09:35:88:7e:7e:c7:6f:5d:b3:
         9a:4e:f8:b0:8d:03:72:21:d9:23:56:aa:11:46:6f:8d:6e:0c:
         b9:f5:ff:eb:d0:a4:0a:80:d0:74:8f:f3:af:ca:9d:66:72:92:
         0e:0d:79:bb:2c:91:13:8e:e3:0d:ab:12:98:9a:a2:99:b9:1e:
         37:18:7a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 02:48:27 2024 by rpki-client on console-ams.rpki-client.org